Skip to content
OpenAdvisories
High · 8.8 CVE-2021-32665 EUVD-2021-19481GHSA-mc3m-xwph-4h9h

Verified groups not reliable

Published Jun 3, 2021 · Updated Aug 3, 2024 · Assigned by GitHub_M

Description

wire-ios is the iOS version of Wire, an open-source secure messaging app. wire-ios versions 3.8.0 and earlier have a bug in which a conversation could be incorrectly set to "unverified. This occurs when: - Self user is added to a new conversation - Self user is added to an existing conversation - All the participants in the conversation were previously marked as verified. The vulnerability is patched in wire-ios version 3.8.1. As a workaround, one can unverify & verify a device in the conversation.

Affected products

VendorProductAffectedFixed
wireapp wire-ios <= 3.8.0 —

References